CVE-2005-0233

Published: Feb 8, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Affected (6)

Products: Mozilla: Camino, Firefox, Mozilla · Omnigroup: Omniweb · Opera: Opera Browser · +1 more

Show all products

Mozilla: Camino, Firefox, Mozilla · Omnigroup: Omniweb · Opera: Opera Browser · Opera Software: Opera Web Browser

3 products

1 product

1 product

1 product

Opera Web Browser

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Mozilla Camino	Version 0.8.5
Mozilla Firefox	Version 1.0
Mozilla Mozilla	Before 1.7.6
Omnigroup Omniweb	Version 5
Opera Opera Browser	Up to 7.54
Opera Software Opera Web Browser	Version 7.54

References (28)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html

Source: secalert@redhat.com

Broken LinkExploitVendor Advisory

http://marc.info/?l=bugtraq&m=110782704923280&w=2

Source: secalert@redhat.com

Mailing List

http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml

Source: secalert@redhat.com

ExploitPatchThird Party AdvisoryVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Source: secalert@redhat.com

ExploitPatchThird Party AdvisoryVendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-29.html

Source: secalert@redhat.com

ExploitPatchThird Party AdvisoryVendor Advisory

http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html

Source: secalert@redhat.com

Broken LinkExploitPatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-176.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2005-384.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/12461

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.shmoo.com/idn

Source: secalert@redhat.com

Broken LinkExploitVendor Advisory

http://www.shmoo.com/idn/homograph.txt

Source: secalert@redhat.com

Broken LinkExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029

Source: secalert@redhat.com

Tool Signature

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229

Source: secalert@redhat.com

Tool Signature

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitVendor Advisory

http://marc.info/?l=bugtraq&m=110782704923280&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party AdvisoryVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party AdvisoryVendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-29.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party AdvisoryVendor Advisory

http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitPatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-176.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.redhat.com/support/errata/RHSA-2005-384.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/12461

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.shmoo.com/idn

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitVendor Advisory

http://www.shmoo.com/idn/homograph.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029

Source: af854a3a-2127-422b-91ae-364da2661108

Tool Signature

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229

Source: af854a3a-2127-422b-91ae-364da2661108

Tool Signature

Timeline

No history available yet.